$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: o0gCoOVHyt5WyBBPw4vgREWco0DKDxS0SmgbD6e4aRU= Subject key identifier: 80:8B:DA:92:02:4C:8B:F0:6B:27:6B:72:7D:3D:85:E3:8E:70:03:CD Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 0198D4E06A9463B07AD3FFB51A29D988FD82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 1345 Signing time: Sat 23 Aug 2025 03:02:13 +0000 Manifest this update: Sat 23 Aug 2025 03:02:13 +0000 Manifest next update: Sun 24 Aug 2025 03:02:13 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 3: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 4: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 5: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: l/lfd57UF+WRJhHconJ57cXKHZr3JOH0UUtdwpi8VUU=) 6: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 7: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 8: UnvnWibayArM0rP_4GK2HPqji88.roa (hash: iHEj+BKItdDDWf+r36lrBqtGBGTAVvOycWO2mc2eMRo=) 9: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 10: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 11: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 12: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 13: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 14: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 15: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Aug 2025 00:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:98:d4:e0:6a:94:63:b0:7a:d3:ff:b5:1a:29:d9:88:fd:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Aug 23 03:02:13 2025 GMT Not After : Aug 24 03:02:13 2025 GMT Subject: CN=808bda92024c8bf06b276b727d3d85e38e7003cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b0:fe:da:a7:9f:d6:74:2c:f4:02:8b:48:24: b3:74:b1:94:09:33:b3:ce:c9:aa:6d:dd:09:66:3c: c5:c3:43:59:09:b8:6d:27:fc:0a:c2:1f:fb:97:8f: 2b:28:68:a9:63:ba:3b:bd:98:98:0b:cb:ed:39:81: 81:a2:58:9e:b1:35:d0:93:3b:f5:0c:f0:ee:cb:d6: f9:25:d6:f2:59:1a:df:34:6e:45:de:21:25:7b:7e: 80:00:43:2a:56:9e:bf:9a:de:31:ca:8f:11:7d:3e: ee:41:02:2f:58:10:56:eb:f1:2c:b8:bd:7a:76:ca: 68:be:bb:1a:da:90:e1:9a:4b:30:c0:2e:a1:a2:0f: 46:58:9a:9f:72:47:5f:07:08:9e:8a:42:51:dc:d3: 37:76:7a:77:e0:80:91:0f:ca:a0:67:73:d8:9c:30: 34:8e:56:81:8e:74:df:b8:84:eb:15:7e:ae:22:72: de:e1:e0:90:6f:9f:c5:2b:0f:04:7f:28:c9:58:d1: 81:77:a1:74:b2:1e:ec:17:a2:69:33:2e:95:f2:e0: 8a:0f:ce:14:f6:48:6c:46:fb:31:a6:4b:dc:c4:65: 3f:c1:b8:e0:74:d9:2c:e7:f2:73:d0:26:11:f7:c1: c2:1b:47:2f:b3:cd:bd:e5:08:fc:72:9d:db:59:a1: 19:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8B:DA:92:02:4C:8B:F0:6B:27:6B:72:7D:3D:85:E3:8E:70:03:CD X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:23:08:0b:ef:86:70:2b:1f:e8:a3:fb:c4:f4:76:2b:a4:e8: 5e:f1:cf:a2:bf:35:e1:df:9d:d3:c0:57:b5:3a:d6:4f:a0:b2: 67:6a:0d:b7:9a:74:04:65:d5:73:ab:c1:89:85:61:4a:77:28: 8b:9e:21:89:0e:d0:b0:b1:44:45:21:52:d1:b8:1c:32:d9:a9: a1:fb:b6:79:9c:0c:6a:39:c2:25:d6:a7:71:a2:a0:7a:7f:75: c4:ca:8c:cb:5c:1a:d6:f3:79:21:b8:ad:c4:78:a4:40:e8:e0: 08:c5:8e:cf:58:52:c3:35:05:08:23:b8:a0:a7:33:03:13:d4: e8:50:d9:1c:1c:0e:80:42:90:65:1a:61:1b:69:30:0f:39:e3: 48:cd:d2:54:a7:78:b3:db:aa:de:7c:4f:f8:02:0e:bb:21:7d: 8a:5e:bb:10:e3:7c:b4:9b:38:d8:34:9d:20:37:7f:af:99:54: 8f:6a:fe:68:ab:bd:24:08:0d:96:55:18:50:95:8f:b4:13:1c: cd:d1:76:9c:0c:73:78:50:4b:dc:d6:86:93:c0:0a:d2:15:38: b9:7f:e4:80:6e:d1:c4:ce:f3:64:13:4e:43:b5:1a:d4:dd:8c: 22:f7:91:e5:0e:1a:c5:98:4d:fd:14:b8:68:05:95:94:f1:6f: ca:89:f9:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZjU4GqUY7B60/+1GinZiP2CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUwODIzMDMwMjEzWhcNMjUwODI0MDMwMjEzWjAzMTEwLwYDVQQD Eyg4MDhiZGE5MjAyNGM4YmYwNmIyNzZiNzI3ZDNkODVlMzhlNzAwM2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbD+2qef1nQs9AKLSCSzdLGUCTOz zsmqbd0JZjzFw0NZCbhtJ/wKwh/7l48rKGipY7o7vZiYC8vtOYGBoliesTXQkzv1 DPDuy9b5JdbyWRrfNG5F3iEle36AAEMqVp6/mt4xyo8RfT7uQQIvWBBW6/EsuL16 dspovrsa2pDhmkswwC6hog9GWJqfckdfBwieikJR3NM3dnp34ICRD8qgZ3PYnDA0 jlaBjnTfuITrFX6uInLe4eCQb5/FKw8EfyjJWNGBd6F0sh7sF6JpMy6V8uCKD84U 9khsRvsxpkvcxGU/wbjgdNks5/Jz0CYR98HCG0cvs8295Qj8cp3bWaEZwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICL2pICTIvwaydrcn09heOOcAPNMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSMIC++G cCsf6KP7xPR2K6ToXvHPor814d+d08BXtTrWT6CyZ2oNt5p0BGXVc6vBiYVhSnco i54hiQ7QsLFERSFS0bgcMtmpofu2eZwMajnCJdancaKgen91xMqMy1wa1vN5Ibit xHikQOjgCMWOz1hSwzUFCCO4oKczAxPU6FDZHBwOgEKQZRphG2kwDznjSM3SVKd4 s9uq3nxP+AIOuyF9il67EON8tJs42DSdIDd/r5lUj2r+aKu9JAgNllUYUJWPtBMc zdF2nAxzeFBL3NaGk8AK0hU4uX/kgG7RxM7zZBNOQ7Ua1N2MIveR5Q4axZhN/RS4 aAWVlPFvyon5Lw== -----END CERTIFICATE-----Generated at Sat Aug 23 08:18:18 2025 by rpki-client